Product:
Windows Kernel
Summary
The Windows Kernel has a vulnerability that allows an authorized attacker to expose sensitive information to an unauthorized actor. This can lead to the disclosure of sensitive information locally. The issue arises due to improper handling of information within the kernel.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-53804 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the weakness in the Windows Kernel to gain unauthorized access to sensitive information. The attack requires low privileges and does not necessitate user interaction, making it easier for an attacker to execute.
Affected Products
- Windows Kernel: Vulnerable to information disclosure due to improper handling of sensitive data.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Regularly applying updates can help protect against potential exploitation of this and other vulnerabilities.